last executing test programs: 572.531312ms ago: executing program 1 (id=2): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x2000) 527.661657ms ago: executing program 1 (id=5): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) 508.785969ms ago: executing program 0 (id=1): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'macvlan1\x00', {0x2, 0x4e20, @broadcast}}) sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x28000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x24}}, 0x8001) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000207d1eed2c00000000000109022400010000000009040000010300020009210000040122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x3, '0'}, @local=@item_012={0x2, 0x2, 0x7, '\"6'}]}}, 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x6bf3, 0x2, 0x46ee2d17}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x596, 0x500, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xc0, 0x90, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0x40, {0x9, 0x21, 0x1d3, 0x8, 0x1, {0x22, 0xf19}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xf1, 0x80}}}}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x310, 0x9, 0x4, 0x9, 0x68, 0x6}, 0x2e, &(0x7f00000010c0)={0x5, 0xf, 0x2e, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "55238e40b418a651f8ab7a84c4fc8596"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7a, 0x6, 0x9}, @wireless={0xb, 0x10, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7900}]}, 0x1, [{0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x3409}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') preadv(r5, &(0x7f0000003580)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1, 0x7, 0x6) 347.138855ms ago: executing program 3 (id=9): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) userfaultfd(0x40800) 346.642125ms ago: executing program 3 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000"]) 230.803617ms ago: executing program 2 (id=16): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x0, 0x0, 0x530219e96301e866, 0xf, 0xed30, 0x5}, 0x20) 167.584293ms ago: executing program 3 (id=17): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'macvlan1\x00', {0x2, 0x4e20, @broadcast}}) sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x28000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x24}}, 0x8001) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 167.178323ms ago: executing program 2 (id=18): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 132.162586ms ago: executing program 3 (id=19): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) userfaultfd(0x40800) 131.471646ms ago: executing program 2 (id=20): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) userfaultfd(0x40800) 55.095044ms ago: executing program 3 (id=21): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x0, 0x0, 0x530219e96301e866, 0xf, 0xed30, 0x5}, 0x20) 54.603554ms ago: executing program 2 (id=22): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x2000) 54.345234ms ago: executing program 2 (id=23): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 33.638656ms ago: executing program 3 (id=24): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x2000) 0s ago: executing program 2 (id=25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000"]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. [ 24.096156][ T36] audit: type=1400 audit(1763114471.560:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.097843][ T282] cgroup: Unknown subsys name 'net' [ 24.119422][ T36] audit: type=1400 audit(1763114471.560:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.147410][ T36] audit: type=1400 audit(1763114471.590:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.147699][ T282] cgroup: Unknown subsys name 'devices' [ 24.332570][ T282] cgroup: Unknown subsys name 'hugetlb' [ 24.338237][ T282] cgroup: Unknown subsys name 'rlimit' [ 24.534375][ T36] audit: type=1400 audit(1763114472.000:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.557858][ T36] audit: type=1400 audit(1763114472.000:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.569139][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.582963][ T36] audit: type=1400 audit(1763114472.000:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.615013][ T36] audit: type=1400 audit(1763114472.060:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.640760][ T36] audit: type=1400 audit(1763114472.060:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.684639][ T36] audit: type=1400 audit(1763114472.150:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.710651][ T36] audit: type=1400 audit(1763114472.150:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.711025][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.154644][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.162064][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.169210][ T289] bridge_slave_0: entered allmulticast mode [ 26.176080][ T289] bridge_slave_0: entered promiscuous mode [ 26.182770][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.190122][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.197233][ T289] bridge_slave_1: entered allmulticast mode [ 26.203919][ T289] bridge_slave_1: entered promiscuous mode [ 26.251535][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.258609][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.265927][ T292] bridge_slave_0: entered allmulticast mode [ 26.272400][ T292] bridge_slave_0: entered promiscuous mode [ 26.285965][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.293298][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.300436][ T290] bridge_slave_0: entered allmulticast mode [ 26.306770][ T290] bridge_slave_0: entered promiscuous mode [ 26.316524][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.323784][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.330897][ T292] bridge_slave_1: entered allmulticast mode [ 26.337253][ T292] bridge_slave_1: entered promiscuous mode [ 26.346967][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.354073][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.361269][ T290] bridge_slave_1: entered allmulticast mode [ 26.367606][ T290] bridge_slave_1: entered promiscuous mode [ 26.392414][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.399561][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.406962][ T291] bridge_slave_0: entered allmulticast mode [ 26.413379][ T291] bridge_slave_0: entered promiscuous mode [ 26.421845][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.428957][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.436416][ T291] bridge_slave_1: entered allmulticast mode [ 26.443176][ T291] bridge_slave_1: entered promiscuous mode [ 26.615527][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.622718][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.630147][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.637272][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.646719][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.653824][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.661273][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.668373][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.686845][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.694238][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.701736][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.709056][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.725117][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.732240][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.739604][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.746663][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.799263][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.807201][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.814989][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.822503][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.830143][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.837458][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.845474][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.853058][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.867454][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.874641][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.892713][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.899807][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.907657][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.914878][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.922616][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.929720][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.939725][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.947256][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.961471][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.968641][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.997383][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.004587][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.012858][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.020081][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.059273][ T290] veth0_vlan: entered promiscuous mode [ 27.077129][ T289] veth0_vlan: entered promiscuous mode [ 27.098221][ T292] veth0_vlan: entered promiscuous mode [ 27.108482][ T290] veth1_macvtap: entered promiscuous mode [ 27.119707][ T291] veth0_vlan: entered promiscuous mode [ 27.133819][ T289] veth1_macvtap: entered promiscuous mode [ 27.159425][ T292] veth1_macvtap: entered promiscuous mode [ 27.175836][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.184405][ T291] veth1_macvtap: entered promiscuous mode [ 27.329076][ T345] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 27.454573][ T357] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.577133][ T367] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 27.585892][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.705322][ T379] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 27.737397][ T381] incfs: Unexpected inode type [ 27.749608][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 27.763669][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.777010][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.794211][ T291] ------------[ cut here ]------------ [ 27.800246][ T291] WARNING: CPU: 1 PID: 291 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 27.808348][ T291] Modules linked in: [ 27.812379][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 27.824176][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 27.834406][ T291] RIP: 0010:drop_nlink+0xce/0x110 [ 27.839684][ T291] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 27.859763][ T291] RSP: 0018:ffffc9000b64fc60 EFLAGS: 00010293 [ 27.865877][ T291] RAX: ffffffff81ee1a7e RBX: ffff888131608f50 RCX: ffff8881086a1300 [ 27.873945][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.882117][ T291] RBP: ffffc9000b64fc88 R08: 0000000000000003 R09: 0000000000000004 [ 27.890212][ T291] R10: dffffc0000000000 R11: fffff520016c9f7c R12: dffffc0000000000 [ 27.898312][ T291] R13: 1ffff110262c11f3 R14: ffff888131608f98 R15: 0000000000000000 [ 27.906483][ T291] FS: 0000555575481500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 27.915561][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.922250][ T291] CR2: 00007fff888fb508 CR3: 000000012ae52000 CR4: 00000000003526b0 [ 27.930621][ T291] Call Trace: [ 27.934043][ T291] [ 27.937008][ T291] shmem_rmdir+0x5f/0x90 [ 27.941524][ T291] vfs_rmdir+0x3dd/0x560 [ 27.945823][ T291] incfs_kill_sb+0x109/0x230 [ 27.950535][ T291] deactivate_locked_super+0xd5/0x2a0 [ 27.956042][ T291] deactivate_super+0xb8/0xe0 [ 27.960812][ T291] cleanup_mnt+0x3f1/0x480 [ 27.965278][ T291] __cleanup_mnt+0x1d/0x40 [ 27.970063][ T291] task_work_run+0x1e0/0x250 [ 27.974720][ T291] ? __cfi_task_work_run+0x10/0x10 [ 27.980022][ T291] ? __x64_sys_umount+0x126/0x170 [ 27.985099][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.990697][ T291] ? __kasan_check_read+0x15/0x20 [ 27.995886][ T291] resume_user_mode_work+0x36/0x50 [ 28.001112][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 28.006618][ T291] do_syscall_64+0x64/0xf0 [ 28.011220][ T291] ? clear_bhb_loop+0x50/0xa0 [ 28.015951][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.022125][ T291] RIP: 0033:0x7f41baf909f7 [ 28.026597][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 28.046664][ T291] RSP: 002b:00007fff48c6a158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.055157][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f41baf909f7 [ 28.063227][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff48c6a210 [ 28.071449][ T291] RBP: 00007fff48c6a210 R08: 0000000000000000 R09: 0000000000000000 [ 28.079469][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff48c6b2a0 [ 28.087667][ T291] R13: 00007f41bb011d7d R14: 0000000000006c4d R15: 00007fff48c6b2e0 [ 28.095905][ T291] [ 28.098970][ T291] ---[ end trace 0000000000000000 ]--- [ 28.104582][ T46] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 28.113897][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.124302][ T291] ================================================================== [ 28.132440][ T291] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 28.138728][ T291] Write of size 4 at addr 0000000000000168 by task syz-executor/291 [ 28.146732][ T291] [ 28.149083][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 28.149119][ T291] Tainted: [W]=WARN [ 28.149127][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 28.149142][ T291] Call Trace: [ 28.149149][ T291] [ 28.149158][ T291] __dump_stack+0x21/0x30 [ 28.149192][ T291] dump_stack_lvl+0x10c/0x190 [ 28.149222][ T291] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.149255][ T291] print_report+0x3d/0x70 [ 28.149279][ T291] kasan_report+0x163/0x1a0 [ 28.149306][ T291] ? ihold+0x24/0x70 [ 28.149330][ T291] ? _raw_spin_unlock+0x45/0x60 [ 28.149359][ T291] ? ihold+0x24/0x70 [ 28.149382][ T291] kasan_check_range+0x299/0x2a0 [ 28.149409][ T291] __kasan_check_write+0x18/0x20 [ 28.149442][ T291] ihold+0x24/0x70 [ 28.149465][ T291] vfs_rmdir+0x26a/0x560 [ 28.149494][ T291] incfs_kill_sb+0x109/0x230 [ 28.149528][ T291] deactivate_locked_super+0xd5/0x2a0 [ 28.149558][ T291] deactivate_super+0xb8/0xe0 [ 28.149586][ T291] cleanup_mnt+0x3f1/0x480 [ 28.149612][ T291] __cleanup_mnt+0x1d/0x40 [ 28.149635][ T291] task_work_run+0x1e0/0x250 [ 28.149662][ T291] ? __cfi_task_work_run+0x10/0x10 [ 28.149688][ T291] ? __x64_sys_umount+0x126/0x170 [ 28.149718][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.149752][ T291] ? __kasan_check_read+0x15/0x20 [ 28.149786][ T291] resume_user_mode_work+0x36/0x50 [ 28.149813][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 28.149838][ T291] do_syscall_64+0x64/0xf0 [ 28.149874][ T291] ? clear_bhb_loop+0x50/0xa0 [ 28.149899][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.149923][ T291] RIP: 0033:0x7f41baf909f7 [ 28.149941][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 28.149960][ T291] RSP: 002b:00007fff48c6a158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.149983][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f41baf909f7 [ 28.149998][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff48c6a210 [ 28.150012][ T291] RBP: 00007fff48c6a210 R08: 0000000000000000 R09: 0000000000000000 [ 28.150026][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff48c6b2a0 [ 28.150041][ T291] R13: 00007f41bb011d7d R14: 0000000000006c4d R15: 00007fff48c6b2e0 [ 28.150060][ T291] [ 28.150068][ T291] ================================================================== [ 28.397133][ T46] usb 1-1: config 0 descriptor?? [ 28.402190][ T291] Disabling lock debugging due to kernel taint [ 28.409144][ T291] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 28.417111][ T291] #PF: supervisor write access in kernel mode [ 28.423204][ T291] #PF: error_code(0x0002) - not-present page [ 28.429210][ T291] PGD 8000000131169067 P4D 8000000131169067 PUD 0 [ 28.435875][ T291] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 28.442180][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 28.455406][ T291] Tainted: [B]=BAD_PAGE, [W]=WARN [ 28.460531][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 28.470817][ T291] RIP: 0010:ihold+0x2a/0x70 [ 28.475367][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 28.495228][ T291] RSP: 0018:ffffc9000b64fca0 EFLAGS: 00010246 [ 28.501519][ T291] RAX: ffff8881086a1300 RBX: 0000000000000000 RCX: ffff8881086a1300 [ 28.509605][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.517615][ T291] RBP: ffffc9000b64fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 28.525825][ T291] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff888131608f5c [ 28.533937][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 28.541956][ T291] FS: 0000555575481500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 28.551181][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.557826][ T291] CR2: 0000000000000168 CR3: 000000012ae52000 CR4: 00000000003526b0 [ 28.565842][ T291] Call Trace: [ 28.569167][ T291] [ 28.572128][ T291] vfs_rmdir+0x26a/0x560 [ 28.576533][ T291] incfs_kill_sb+0x109/0x230 [ 28.581204][ T291] deactivate_locked_super+0xd5/0x2a0 [ 28.586804][ T291] deactivate_super+0xb8/0xe0 [ 28.591536][ T291] cleanup_mnt+0x3f1/0x480 [ 28.596006][ T291] __cleanup_mnt+0x1d/0x40 [ 28.600479][ T291] task_work_run+0x1e0/0x250 [ 28.605289][ T291] ? __cfi_task_work_run+0x10/0x10 [ 28.610455][ T291] ? __x64_sys_umount+0x126/0x170 [ 28.615532][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.621422][ T291] ? __kasan_check_read+0x15/0x20 [ 28.626691][ T291] resume_user_mode_work+0x36/0x50 [ 28.632031][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 28.637535][ T291] do_syscall_64+0x64/0xf0 [ 28.642075][ T291] ? clear_bhb_loop+0x50/0xa0 [ 28.646829][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.653028][ T291] RIP: 0033:0x7f41baf909f7 [ 28.657492][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 28.677470][ T291] RSP: 002b:00007fff48c6a158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.686043][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f41baf909f7 [ 28.694085][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff48c6a210 [ 28.702098][ T291] RBP: 00007fff48c6a210 R08: 0000000000000000 R09: 0000000000000000 [ 28.710107][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff48c6b2a0 [ 28.718118][ T291] R13: 00007f41bb011d7d R14: 0000000000006c4d R15: 00007fff48c6b2e0 [ 28.726130][ T291] [ 28.729294][ T291] Modules linked in: [ 28.733341][ T291] CR2: 0000000000000168 [ 28.737529][ T291] ---[ end trace 0000000000000000 ]--- [ 28.743029][ T291] RIP: 0010:ihold+0x2a/0x70 [ 28.747851][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 28.768850][ T291] RSP: 0018:ffffc9000b64fca0 EFLAGS: 00010246 [ 28.775122][ T291] RAX: ffff8881086a1300 RBX: 0000000000000000 RCX: ffff8881086a1300 [ 28.783482][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.791718][ T291] RBP: ffffc9000b64fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 28.800066][ T291] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff888131608f5c [ 28.808110][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 28.809947][ T46] kone 0003:1E7D:2CED.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 28.816115][ T291] FS: 0000555575481500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 28.816142][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.816158][ T291] CR2: 0000000000000168 CR3: 000000012ae52000 CR4: 00000000003526b0 [ 28.851242][ T291] Kernel panic - not syncing: Fatal exception [ 28.857809][ T291] Kernel Offset: disabled [ 28.862165][ T291] Rebooting in 86400 seconds..